diff --git a/confluent_server/systemd/confluent.service b/confluent_server/systemd/confluent.service
index 4dca7670..1ceb3364 100644
--- a/confluent_server/systemd/confluent.service
+++ b/confluent_server/systemd/confluent.service
@@ -11,6 +11,7 @@ RuntimeDirectory=confluent
 CacheDirectory=confluent
 LogsDirectory=confluent
 ConfigurationDirectory=confluent
+ConfigurationDirectoryMode=0700
 ExecStart=/opt/confluent/bin/confluent -f
 ExecStop=/opt/confluent/bin/confetty shutdown /
 Restart=on-failure